Privacy Policy

The controller responsible for data processing on this website is:

[Cleanora GmbH, Friedrichstraße 88, 10117 Berlin, Germany] — REPLACE with the confirmed registered address.

Email: [privacy@cleanora.de] — REPLACE with a monitored privacy inbox. Phone: [+49 30 1234 5678] — REPLACE.

If a Data Protection Officer is appointed (required for businesses that process personal data as a core activity, or meet the employee-count threshold under § 38 BDSG), list contact details here: [DPO name / external DPO firm, email, phone] — REPLACE or remove this section if not applicable to Cleanora GmbH’s size and activities.

We collect the following categories of personal data:

• Contact and quote-request data you submit voluntarily (name, company, email, phone, address, service interests, property details, uploaded files) via the Contact and Careers forms.
• Job application data (name, contact details, CV, certificates, cover letter, employment history) submitted via the Careers application form.
• Technical and usage data collected automatically (IP address, browser type, device type, pages visited, referring URL, timestamps) — only for cookie categories you have actively consented to, per our Cookie Policy.
• Cookie preferences and consent records, stored to remember your choices.

We process personal data for the following purposes and legal bases under Art. 6 GDPR:

• Responding to quote requests and enquiries — Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) (legitimate interest in operating our business).
• Processing job applications — Art. 6(1)(b) GDPR and § 26 BDSG (employment-related data processing).
• Website analytics (only with consent) — Art. 6(1)(a) GDPR.
• Marketing and remarketing (only with consent) — Art. 6(1)(a) GDPR.
• Legal compliance, e.g. retaining business correspondence for statutory retention periods — Art. 6(1)(c) GDPR.

We use essential cookies required for the website to function, and — only with your explicit consent — analytics, marketing, functional and preference cookies. You can manage or withdraw consent at any time via the "Cookie Settings" link in the footer. Full details of each category are set out in our Cookie Policy.

We share personal data only where necessary, with processors bound by Art. 28 GDPR data processing agreements. Typical categories include:

• Hosting / infrastructure provider: [provider name, e.g. Hetzner, AWS Frankfurt] — REPLACE with actual vendor and data-centre location.
• Email / CRM provider: [provider name] — REPLACE.
• Analytics provider (if consented): [provider name, e.g. a privacy-focused EU-hosted analytics tool] — REPLACE.
• Payroll / HR systems for job applicants who are hired: [provider name] — REPLACE.

Where any processor is located outside the EU/EEA, transfers are safeguarded by an adequacy decision or EU Standard Contractual Clauses (Art. 46 GDPR). [List specific transfers here if applicable] — REPLACE or remove if all processors are EU-based.

We retain personal data only as long as necessary for the purposes described above, or as required by law (e.g. § 257 HGB / § 147 AO commercial and tax retention periods of 6–10 years for business correspondence and invoices). Unsuccessful job applications are deleted [6 months] — REPLACE after the process concludes, unless you consent to a longer retention for future openings.

Under the GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15 GDPR)
• Request rectification of inaccurate data (Art. 16 GDPR)
• Request erasure ("right to be forgotten") (Art. 17 GDPR)
• Request restriction of processing (Art. 18 GDPR)
• Receive your data in a portable format (Art. 20 GDPR)
• Object to processing based on legitimate interest or direct marketing (Art. 21 GDPR)
• Withdraw consent at any time, without affecting prior lawful processing (Art. 7(3) GDPR)
• Lodge a complaint with a supervisory authority — in Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit

We implement technical and organisational measures (TLS encryption in transit, access controls, regular security reviews) to protect your data against unauthorised access, loss or misuse.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision.